Skip to content

Synthetic demo · No customer connectors attached · Fixture snapshot 24 Sep 2026, 06:15 UTC

Finding

Unowned restricted HR dataset in an active development use case

ds-hr-records contains compensation, performance and protected-characteristic columns with no accountable owner, no recorded origin, and no purpose decision. An unowned sensitive dataset cannot receive an unrestricted use approval.

Observed at 24 Sep 2026, 06:15 UTCfnd-2260R05 — orphaned data with no owner or purposedetected 8 Sep 2026, 12:30 UTClast observed 8 Sep 2026, 12:30 UTC

Summary

Severity
high
Status
open
Evidence freshness
Stale
Remediation
No remediation planned

Potential access

Paths that could reach the data. These are capability, not proof of disclosure.

  • 31,290 employee rows
  • usr-contractor-41 via inherited folder permission

Observed disclosure

Only what collection actually recorded leaving the boundary.

No disclosure observed

Nothing was recorded leaving the boundary for this finding within the collection window.

Absence of an observation is not proof that nothing left. Check the collection lag for the connectors covering this surface.

Affected records

Actors

  • grp-people-analytics
  • usr-contractor-41

Releases

  • none recorded

Continue the investigation

The sample code-to-cloud path is a separate synthetic scenario; a link here does not establish that it caused this finding.

Mitigations in place

A mitigation reduces exposure; it does not close the finding until verification passes.

Scroll table sideways for more columns →

MitigationStatusNote
Owner escalation to the People Analytics directorPartialEscalated twice; no acceptance recorded.
Default deny on training usePassEnforced by the default policy.
Index hr-dev-index isolationUnknownIndex was built outside the managed pipeline; reachability unconfirmed.

Evidence

  • HR extract scan receipt restricted preview

    ev-scan-60 · scan · producer collector-us-02 · collected 8 Sep 2026, 12:00 UTC (16 d ago)

    SignedValid to 8 Oct 2026, 12:00 UTC